Your browser does not allow storing cookies. We recommend enabling them.


Installing on Windows

The Windows installation packages are provided in the MSI (Microsoft Installer) format. The same package is compatible with the 32-bit (x86) and the 64-bit (x64) versions of Microsoft Windows.

The online installation package is a zip file containing the license file and the executable Microsoft Installer (MSI) package.

On the installation disk, the installation package for Windows is located in the /install/windows/ directory.

You must have administrator rights to install Tectia Server on Windows.

Installation of Tectia Server requires restarting the computer.


Tectia Server cannot be installed on file systems that do not support permissions (for example, FAT16 or FAT32). The hard disk partition where Tectia Server is installed must use the NTFS file system.


Tectia Server on Windows is not supported on platforms that have more than 30 CPUs active because lsass.exe will crash during boot time of the Windows host. To install Tectia Server into such a system, the number of CPUs should be limited to 30 by setting the switch /NUMPROC=30 to the boot.ini.

Tectia Server includes support for Entrust certificates on Windows XP. The necessary libraries are automatically included in the installation.

The installation is carried out by a standard installation wizard. The wizard will prompt you for information and will copy the program files, install the services, and generate the host key pair for the server.


Upgrade is different from performing uninstall and install in a row. When you start an upgrade, check the Release Notes to see if upgrading to the new version will require a restart.

To install Tectia Server on Windows, follow the instructions below:

  1. Make sure no other software is using port 22 (Tectia Server default listen port). Stop any competing server software or change their listen port.

  2. Extract the installation zip file contents to a temporary location.

  3. Locate the Windows Installer file ssh-tectia-server-<version>-windows.msi (where <version> shows the Tectia Server version and build number, for example On some Windows versions the .msi file type is not shown for the installer file.

  4. Double-click the installation file, and the installation wizard will start.


    The license file will be imported automatically when you extract the contents of the online .zip package before running the .msi installer, or if you are installing from the installation disk.

    If you run the .msi installer directly from the online .zip package, you need to manually import the sts62.dat license file after completing the installation. The installation wizard will show an error message about missing license file, and when you attempt to start the Tectia Server, you are prompted to import the license manually to the license directory:

    C:\Program Files\SSH Communications Security\SSH Tectia\SSH Tectia AUX\licenses

  5. Follow the wizard through the installation steps and fill in information as requested.

    The server host key is generated during the installation. The key generation may take several minutes on slow machines.

  6. When the installation has finished, click Finish to exit the wizard.

  7. Fresh installation always requires restarting the computer. In case you were performing an upgrade, a restart is not necessarily required.

  8. Restart the computer.

    Tectia Server will start automatically every time the computer is started, and it stays running in the background. Tectia Server displays no icons on the desktop, but you can see it listed in the Windows Start → Programs menu.

    In case the server does not (re)start automatically, you can start it manually according to the instructions given in Starting and Stopping on Windows.

Silent Installation

Tectia Server can also be installed silently on a server host. Silent (non-interactive) installation means that the installation procedure will not display any user interface and will not ask any questions from the user. This option is especially useful for system administrators, as it allows remotely-operated automated installations.

In silent mode, Tectia Server is installed with the default settings and without any additional features.


After the Tectia Server has been installed, the server is automatically restarted.

The following command can be used to install Tectia Server silently:

msiexec /q /i ssh-tectia-server-<version>-windows.msi INSTALLDIR="<path>"

In the command, <version> is the current version of Tectia Server (for example,, and <path> is the path to the desired installation directory. If the INSTALLDIR variable is omitted, Tectia Server is installed to the default location ("C:\Program Files\SSH Communications Security\SSH Tectia"). However, on 64-bit Windows where a 32-bit version of Tectia Server is installed, the default location is "C:\Program Files (x86)\SSH Communications Security\SSH Tectia".


Highlights from the SSH.COM blog:

  • Cryptomining with the SSH protocol: what big enterprises need to know about it

    Cryptomining malware is primarily thought of as targeting desktops and laptops and is used to hijack system resources to mine cryptocurrency.
    Read more
  • SLAM the door shut on traditional privileged access management

    Did you know that something as trivial-sounding as granting access for your developers or third parties to a product development environment can throw a gorilla-sized monkey wrench into your operations and productivity?
    Read more
  • We broke the IT security perimeter

    Everyone understands the concept of a security perimeter. You only gain access if you are identified and authorized to do so.
    Read more